What is the official website of Sonepar Perú ?

The official website of Sonepar Perú is http://sonepar.pe/.

What is Sonepar Perú's cybersecurity risk score?

Sonepar Perú has an AI-generated cybersecurity risk score of 747 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Sonepar Perú experienced?

According to Rankiteo, Sonepar Perú currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Sonepar Perú been affected by any supply chain cyber incidents ?

According to Rankiteo, Sonepar Perú has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Sonepar Perú have SOC 2 Type 1 certification ?

According to Rankiteo, Sonepar Perú is not certified under SOC 2 Type 1.

Does Sonepar Perú have SOC 2 Type 2 certification ?

According to Rankiteo, Sonepar Perú does not hold a SOC 2 Type 2 certification.

Does Sonepar Perú comply with GDPR ?

According to Rankiteo, Sonepar Perú is not listed as GDPR compliant.

Does Sonepar Perú have PCI DSS certification ?

According to Rankiteo, Sonepar Perú does not currently maintain PCI DSS compliance.

Does Sonepar Perú comply with HIPAA ?

According to Rankiteo, Sonepar Perú is not compliant with HIPAA regulations.

Does Sonepar Perú have ISO 27001 certification ?

According to Rankiteo,Sonepar Perú is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Sonepar Perú operate in ?

Sonepar Perú operates primarily in the Appliances, Electrical, and Electronics Manufacturing industry.

How many employees does Sonepar Perú have ?

Sonepar Perú employs approximately 122 people worldwide.

Does Sonepar Perú own any subsidiaries ?

Sonepar Perú presently has no subsidiaries across any sectors.

How many LinkedIn followers does Sonepar Perú have ?

Sonepar Perú's official LinkedIn profile has approximately 11,144 followers.

What is the NAICS classification code for Sonepar Perú ?

Sonepar Perú is classified under the NAICS code 335, which corresponds to Electrical Equipment, Appliance, and Component Manufacturing.

Does Sonepar Perú have a Crunchbase profile ?

No, Sonepar Perú does not have a profile on Crunchbase.

Does Sonepar Perú have a LinkedIn profile ?

Yes, Sonepar Perú maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/soneparperu.

How many cybersecurity incidents has Sonepar Perú experienced ?

As of August 10, 2026, Rankiteo reports that Sonepar Perú has not experienced any cybersecurity incidents.

How many peer or competitor companies does Sonepar Perú have ?

Sonepar Perú has an estimated 9,684 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Sonepar Perú

Boost Score +25 with badge (5 left)

747

/1000

Moderate

772

/1000

Fair

Sonepar Perú Vendor Cyber Rating & Cyber Score

sonepar.pe

Add Your Compliance Badge

Somos Sonepar, una empresa multinacional de origen francés con liderazgo mundial en el mercado B2B y B2C de la distribución de materiales eléctricos, soluciones y servicios relacionados. Asesorando a clientes en diversos segmentos de mercado y empleando a mas de 48 mil, dedicados y talentosos asociados. Somos una empresa que recauda 24 billones de euros en todo el mundo, a través de nuestras 145 operaciones en 48 países. El desarrollo de soluciones digitales es vital para que nosotros entreguemos al mercado un servicio excepcional y mantengamos la mejor relación con el cliente cada día, todos los días. Nuestra ambición es ser “La Reference” Para más información, visita nuestra web: sonepar.pe y e-commerce: tienda.sonepar.pe, o escríbenos

Sonepar Perú A.I CyberSecurity Scoring

Scoring History

Sonepar Perú

Sonepar Perú CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Sonepar Perú Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Sonepar Perú

Incidents vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for Sonepar Perú in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Sonepar Perú in 2026.

Incident Types Sonepar Perú vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for Sonepar Perú in 2026.

Incident History - Sonepar Perú (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Sonepar Perú Subsidiaries

Sonepar Perú

Appliances, Electrical, and Electronics Manufacturing

Website: http://sonepar.pe/

Company Size: 122

SoneparWholesale

Technische UnieWholesale

Technische Unie DuurzaamConstruction

Werken bij Technische UnieWholesale

Technische Unie Datacom & Smart BuildingTransportation, Logistics, Supply Chain and Storage

Technische Unie IndustrieWholesale

TU CampusWholesale

Technische Unie LichtWholesale

Sonepar BrasilWholesale

DW Material ElétricoWholesale

EtilRetail

Nortel Suprimentos Industriais S.A.Wholesale

Dimensional BrasilWholesale

Sonepar USAWholesale

Capital ElectricWholesale

Springfield ElectricWholesale

NorthEast ElectricalWholesale

OneSource DistributorsWholesale

World Electric SupplyElectrical Equipment Manufacturing

Irby UtilitiesUtilities

Viking ElectricWholesale

Cooper ElectricAppliances, Electrical, and Electronics Manufacturing

Crawford Electric SupplyWholesale

Richards ElectricWholesale

Irby Co.Wholesale

North Coast ElectricWholesale

Billows Electric SupplyConstruction

Electric SupplyWholesale

Professional Electric Products Company (PEPCO)Wholesale

QEDWholesale

Nedco SupplyWholesale

HOLT Electrical SupplyWholesale

Independent Electric SupplyWholesale

Codale Electric Supply, Inc.Wholesale

Sonepar CanadaWholesale

LumenWholesale

GescanWholesale

TexcanWholesale

ElectrozadWholesale

Aztec Electrical Supply Inc.Automation Machinery Manufacturing

Dixon ElectricWholesale

MGM Electric Ltd.Wholesale

Sonepar FranceWholesale

CCFRetail Office Equipment

AldianceWholesale

Sonepar ItaliaWholesale

Sonepar EspañaWholesale

Masibus Automation And Instrumentation Pvt. Ltd.Appliances, Electrical, and Electronics Manufacturing

Sonepar IndiaWholesale

Sacchi ElettrofornitureWholesale

CebeoWholesale

Sonepar Deutschland GmbHWholesale

Sonepar ColombiaWholesale

Lawrence & HansonWholesale

Lawrence & Hanson Sustainability SolutionsRenewable Energy Semiconductor Manufacturing

Specialised Lighting SolutionsRenewable Energy Semiconductor Manufacturing

Pacific DatacomInformation Technology & Services

Lawrence & Hanson Industrial Automation SA/NTWholesale

Sonepar ChileWholesale

Sonepar SverigeWholesale

Sonepar SverigeWholesale Building Materials

斯堪的亚电子（上海）有限公司Telecommunications

Sonepar Sverige SäkerhetWholesale

Van Egmond GroepWholesale

EletronorWholesale

KVC | A Sonepar CompanyWholesale Appliances, Electrical, and Electronics

Sonepar Suomi OyWholesale

Sonepar Österreich GmbHWholesale

Sonepar Suisse AGWholesale

Sonepar IndustryWholesale

Alcione | A Sonepar CompanyWholesale

Corys ElectricalWholesale

Sonepar Norge ASWholesale

Sonepar México & CaribeWholesale

Vallen AsiaWholesale

Sonic AutomationWholesale

Sonepar ChinaWholesale

Sonepar PolskaWholesale

Sonepar PortugalWholesale

UbelWholesale

HoST Pte Ltd ( A Sonepar Company )Wholesale

Cardi BelysningArchitecture and Planning

Sonepar ThailandWholesale

Sonepar Thailand CareerWholesale

Sonepar Magyarország Kft.Wholesale

Sonepar BuildingWholesale

Sonepar Česká republika spol. s r.o.Wholesale

Helifors ASWholesale

Sonepar Romania SRLWholesale

Warren Del CaribeWholesale

MayflexInformation Technology & Services

Excel Networking SolutionsIT Services and IT Consulting

RoutecoIndustrial Automation

Routeco NetherlandsIndustrial Automation

AutoLogic Systems Ltd.Transportation, Logistics, Supply Chain and Storage

Routeco AustriaAutomation Machinery Manufacturing

Routeco SwitzerlandAutomation Machinery Manufacturing

Routeco BeLuxIndustrial Automation

Loading…

Sonepar Perú Similar Companies

Keysight Technologies

keysight.com

Keysight empowers innovators to explore, design, and bring world-changing technologies to life. As the industry’s premier global innovation partner, Keysight’s software-centric solutions serve engineers across the design and development environment, enabling them to deliver tomorrow’s breakthroughs at speed and with reduced risk. Keysight leverages its strength as the world’s leading test and measurement provider and today enables innovators to push the boundaries of engineering by quickly solving design, emulation, and test challenges to help create the best product experiences. Whether you're looking to improve your design and development process, optimize and secure your network, or harness AI and digital twins to get a head start on technologies like 6G, AV and EV, IoT, or quantum computing — Keysight accelerates innovation across the workflow with intelligent insights built on the most accurate measurements. Our fusion of technology knowledge, measurement science expertise, and tailored solutions helps you forge ahead with confidence in our connected and dynamic world. Keysight Technologies (NYSE: KEYS) is an S&P 500 technology company, headquartered in Santa Rosa, California, with offices and manufacturing worldwide. Keysight owns 2,000+ patents and our ~15,000 employees work with nearly 32,000 customers worldwide to start technology revolutions. Keysight customers span the communications, industrial automation, aerospace and defense, automotive, energy, semiconductor, and general electronics markets. Join us! To accelerate innovation to connect and secure the world, innovators start here, with Keysight.

Molex

molex.com

Molex makes a connected world possible by enabling technologies that transform the future and improve lives. With a presence in more than 40 countries, Molex offers a complete range of connectivity products, services and solutions for the data communications, medical, industrial, automotive and consumer electronics industries. We’re doing more than developing solutions for our customers, we’re Creating Connections for Life.

TE Connectivity

te.com

TE Connectivity plc (NYSE: TEL) is a global industrial technology leader creating a safer, sustainable, productive and connected future. As a trusted innovation partner, our broad range of connectivity and sensor solutions enable the distribution of power, signal and data to advance next-generation transportation, energy networks, automated factories, data centers enabling artificial intelligence and more. Our more than 90,000 employees, including 10,000 engineers, work alongside customers in approximately 130 countries. In a world that is racing ahead, TE ensures that EVERY CONNECTION COUNTS.

TDK

tdk.com

TDK Corporation is a world leader in electronic solutions for the smart society based in Tokyo, Japan. Built on a foundation of material sciences mastery, TDK welcomes societal transformation by resolutely remaining at the forefront of technological evolution. It was established in 1935 to commercialize ferrite, a key material in electronic and magnetic products. TDK’s comprehensive, innovation-driven portfolio features passive components such as ceramic, aluminum electrolytic and film capacitors, as well as magnetics, high-frequency, and piezo and protection devices. The product spectrum also includes sensors and sensor systems such as temperature and pressure, magnetic, and MEMS sensors. In addition, TDK provides power supplies and energy devices, magnetic heads, software and more. These products are marketed under the product brands TDK, EPCOS, InvenSense, Micronas, Tronics, and TDK-Lambda. TDK focuses on demanding markets in automotive, industrial and consumer electronics, and information and communication technology. The company has a network of design and manufacturing locations and sales offices in Asia, Europe, and in North and South America. In fiscal 2025, TDK posted total sales of USD 14.4 billion and employed about 105,000 people worldwide.

Midea Group

midea-group.com

Midea Group aspires to the vision of “Bringing Great Innovations to Life”, upholding the Founders’ philosophy of creating a better life through technology. Midea Group has evolved into a global leading technology company specializing in six major businesses including Smart Home Business, Industrial Technologies, Building Technologies, Robotics &Automation, Midea Healthcare and Annto Logistics. Over the past ten years, we have invested nearly 100 billion yuan in R&D and developed a global network spanning 38 R&D centers and 44 major production sites across the world. At present, Midea Group’s products and services serve more than 500 million customers in over 200 countries and regions, our brand portfolio contains Little Swan, Toshiba, WAHIN, COLMO, Clivet, Eureka, KUKA, GMCC, Welling, LINVOL, and Wandong. With nearly 200,000 employees globally and more than 40,000 based internationally, Midea Group ranks 277th on the Global Fortune 500 in 2024, marking the 9th consecutive year on the list. The company holds A/A2/A credit ratings from S&P, Moody's, and Fitch respectively. Midea Group places a strong focus on technology leadership, driving innovation across global markets. Midea adheres to the new strategic axis of "Technology Leadership, User Direct Access, Digital Intelligence Driven, and Global Breakthroughs," we advance our leadership in Smart Home and Smart Manufacturing while fostering talent. By providing growth opportunities in a dynamic, global environment, we empower our teams to shape the future of innovation.

Bharat Heavy Electricals Limited

bhel.com

Established in 1964, BHEL is one of India's largest engineering and manufacturing enterprises in the energy and infrastructure sectors, and a leading power equipment manufacturer globally. BHEL serves the core sectors of the economy and provides a comprehensive portfolio of products, systems and services to customers in power, transmission, transportation, renewables, water, defence & aerospace, oil & gas, and industry. BHEL has created value for its stakeholders due to the scale and depth of its operations, rich experience, competent manpower, innovative ecosystem, diverse product-mix and focus on sustainable business solutions. BHEL’s greatest asset- its highly skilled and committed workforce of more than 34,000 employees is the cornerstone of its success. BHEL’s commitment to nation building reflects in many ways- in its contribution to the country’s installed power generation capacity; bringing the latest state-of-the-art technology to the country; consistent highest expenditure of more than 2.5% of its turnover on R&D and innovation in the Indian engineering segment; pan-India presence; establishment of world-class assets with presence in over 84 country across the globe, and contribution to the society at large through initiatives in skilling youth, health & hygiene, education, cleanliness and environment protection, to name a few. With a widespread network of 16 manufacturing facilities, 2 repair units, 4 regional offices, 8 service centres, 1 subsidiary, 3 active joint ventures, 15 regional marketing centres, 3 overseas offices and current project execution at more than 150 project sites across India and abroad, BHEL manufactures a wide range of high quality & reliable products adhering to national & international standards. BHEL has installed over 1000 utility sets worldwide with its installed base of supplied power generating equipment exceeding 185 GW. BHEL has also commissioned 200+ electric substations & 5 major HVDC projects in the country.

Dyson

dyson.com

Dyson solves real-world problems and creates better products through the application of engineering, science, design and creativity. It is a family-owned, global technology company, founded by Sir James Dyson who remains at the helm alongside his son Jake. Since inventing the first cyclonic bagless vacuum cleaner, the DC01, Dyson has consistently invested in research and development to improve its products and technologies radically. Dyson offers products across a growing range of areas: floorcare, air purification, robotics, haircare including formulations, lighting, hand drying, and most recently audio. Dyson continues to expand into new areas. Today, Dyson sells products in more than 80 markets, has 450 Dyson stores worldwide and is available in all major technology and beauty retailers. Dyson has global headquarters in Singapore and major technology campuses in Singapore, the UK, Malaysia, and the Philippines. Its global team of engineers, scientists and software developers are focused on developing technology-enabled products which work better and which people love to use. Key areas of focus have included high-speed electric digital motors, sensing and vision systems, robotics, machine learning and aerodynamics. Beyond products, to encourage an inventive future, Dyson is also inspiring the next generation of engineers and inventors through the Dyson Institute of Engineering and Technology, the James Dyson Foundation and the James Dyson Award. The Dyson family applies its problem-solving approach in other fields, and established Dyson Farming in 2012. It is one of the largest farming businesses in the UK, extending to 36,000 acres across Lincolnshire, Oxfordshire, Gloucestershire and Somerset. It is a family-owned enterprise unlike any other, focussed on long-term investment in British farming and the countryside to grow tasty and nutritious food.

Vertiv

Vertiv.com

Vertiv is a global leader in critical digital infrastructure for applications in data centers, communication networks, and commercial and industrial environments. As businesses, industries, and communities become more connected, we pioneer and deliver end-to-end power and cooling technologies to help our customers stay resilient, optimized, and future-ready. With our industry-leading innovative technologies and global services network, we are fueling the revolution of the digital world - keeping technology ecosystems running efficiently and without interruption. Vertiv is supercharging data’s potential; accelerating the pace of technology, raising the bar for accelerated compute and redefining the limits of densification. The world depends on data we power and cool™

Havells India Ltd

havells.com

Havells India Limited is a leading FMEG company with a strong global presence, manufacturing a wide range of electrical products for residential, commercial, and industrial use. Key brands include Havells, Havells Studio, Lloyd, Havells Crabtree, Standard Electricals and REO. With a focus on innovation and customer satisfaction, Havells boasts a robust distribution network, exclusive brand showrooms, and a strong emphasis on service. The company prioritizes sustainability, with a focus on renewable energy, waste reduction, and environmental conservation. Havells is committed to social responsibility, with initiatives in education, sanitation, and community development. Recognized for its sustainability efforts, Havells has been ranked in the Dow Jones Sustainability Index and maintains an 'A' rating in the MSCI ESG Rating. Learn more about Havells on the following channels: Facebook I Youtube I Twitter I Instagram I

Loading…

NEWS

Sonepar Perú CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 18, 2026 01:33 PM

Sonepar USA Achieves Cybersecurity Maturity Model Certification (CMMC)

CHARLESTON, SC, March 18, 2026 (GLOBE NEWSWIRE) -- Sonepar, the global leader in B2B distribution of electrical products, solutions,...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19374

SUMMARY

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/route.ts of the component Proxy API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack is possible to be carried out remotely. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-19373

SUMMARY

A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index.ts of the component BaseConfigSchema. Executing a manipulation of the argument apiUrl can lead to server-side request forgery. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19372

SUMMARY

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component upload_document. Performing a manipulation of the argument File results in path traversal. Attacking locally is a requirement. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19371

SUMMARY

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Such manipulation of the argument image_path leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-12372

SUMMARY

A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space (`100.64.0.0/10`). This occurs because Python's `ipaddress` module does not classify such addresses as `is_private` or `is_global`, and the current guard only checks `is_private` and a few explicit categories. An attacker who can influence a URL passed to NLTK's network-loading helpers can exploit this vulnerability to make a strict-mode application send requests to shared-address-space hosts, potentially exposing non-public infrastructure reachable from the application host. The impact is limited to SSRF-style confidentiality exposure, with no code execution claimed.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

https://huntr.com/bounties/2911b643-571c-42e4-b0c2-9a1fa6f491db

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…